
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
File: 7qiugNcT5rItsOxgkVfwxZpS_X8.mft (raw, json)
Hash identifier: LW4FCO4TrxmJhV1OKFcmPt1P0RZtB4OO+WfRe7rS9j4=
Subject key identifier: C7:22:FD:70:6C:25:38:C5:41:AC:46:33:1E:5D:F9:67:0E:63:C3:74
Authority key identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
Certificate issuer: /CN=A918D6B7/serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Certificate serial: 35DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
Manifest number: 3594
Signing time: Wed 22 Jul 2026 14:53:14 +0000
Manifest this update: Wed 22 Jul 2026 14:53:14 +0000
Manifest next update: Wed 29 Jul 2026 14:53:14 +0000
Files and hashes: 1: 7qiugNcT5rItsOxgkVfwxZpS_X8.crl (hash: 5YZZEFQe4e4SawbxOu1IyqQ9EEMlwUOBGcEumq+jGQ0=)
2: 2ACF9E0C855C11EB8C076013C4F9AE02.roa (hash: RNuWwl4ucRlwsOZtGnFpFuiswJzOcCNas2gxr3gm8mE=)
3: F026CE74927411EDB020A481C4F9AE02.roa (hash: 1AaElHDkTEKXFD2hRezGGSYnw6xWVDkVzFuRAP8Q8Ic=)
4: 6C0C85D0A43011ECA230771BC4F9AE02.roa (hash: W2SBGy0WMlElVPQX0czbiLooxC9uWPTo+MEamMh0ymA=)
5: 2A73A3403A0711F081048A4EC4F9AE02.roa (hash: dvlRe6H3F8B2GwYIE840UeTvVO5dQ86LFZ7LGPZOm2k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:53:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13790 (0x35de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D6B7, serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Validity
Not Before: Jul 22 14:53:14 2026 GMT
Not After : Jul 29 14:53:14 2026 GMT
Subject: CN=6a60d95a-114f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:42:a3:68:c1:1e:e5:90:58:d3:a1:ff:62:a4:
21:54:84:2e:d6:ec:c8:f9:9b:03:14:00:48:56:2b:
c0:03:77:9c:c1:c2:99:cf:19:45:17:76:84:fb:31:
c7:e9:28:d9:47:a9:12:e6:0d:25:30:6f:fd:f4:af:
f0:88:bb:b6:3a:bc:74:2f:55:ff:f3:bc:25:53:72:
45:55:32:66:4a:03:e7:9b:26:31:98:46:47:24:62:
30:59:85:08:b6:6e:22:76:09:87:51:5a:00:c2:4d:
27:ae:12:21:b8:7b:ee:3b:e3:1a:71:1e:58:91:6e:
b6:75:9c:13:85:1f:cd:cb:d2:48:98:1c:31:db:cb:
d5:5c:f1:e6:8a:3f:b1:9b:59:55:de:3e:57:e2:8d:
36:61:62:60:3a:f0:7b:23:d5:d9:e9:a9:10:d8:72:
34:37:5f:d7:d2:6f:04:05:9f:2f:f3:79:11:b2:b2:
2b:f8:a3:de:ee:f8:16:b5:2d:49:ee:0b:df:bc:b2:
22:7c:a6:d9:50:3d:81:2c:68:60:d6:9f:f0:dc:a5:
b5:d6:3f:52:90:81:9f:c8:39:a8:3b:4a:64:91:c8:
12:c5:4c:bb:9b:b7:d8:55:cd:e9:ee:20:9f:d3:c3:
51:53:a7:01:36:12:a8:d2:a4:4f:c6:2c:f3:51:6a:
e9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:22:FD:70:6C:25:38:C5:41:AC:46:33:1E:5D:F9:67:0E:63:C3:74
X509v3 Authority Key Identifier:
keyid:EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:7c:27:e6:ca:e9:92:38:27:df:0f:3a:d7:3a:12:50:d0:4c:
57:71:04:54:b5:1a:c6:a8:77:66:15:61:65:ed:5c:59:ec:f3:
6c:09:4d:cc:34:62:55:7b:eb:9d:8c:03:2f:e1:5a:c5:44:fd:
a5:75:af:4f:da:ae:f7:97:52:98:20:3c:46:da:7d:80:66:fb:
53:6b:99:ab:16:35:19:a0:ba:d3:22:33:86:6b:40:ed:6c:64:
21:fe:a3:8c:41:66:5a:05:4d:89:1e:cb:0d:d2:1f:e5:c1:9e:
1b:f9:1f:c4:2c:7f:20:c2:45:6a:50:66:a7:19:64:47:5f:c2:
a9:c2:a3:d3:b8:4d:71:54:79:ef:0a:13:6b:44:31:da:2f:ce:
33:7a:a0:3e:d4:16:ee:49:af:0b:a1:09:e9:4f:a3:56:d9:c4:
ba:53:29:70:1e:76:4d:26:6d:d9:75:55:90:ed:a1:93:ca:a7:
33:ca:f2:c9:dd:c9:10:46:a8:64:e3:6e:60:e7:ef:8d:fa:80:
41:a7:80:e5:65:c9:7e:11:a3:c0:f7:11:dc:db:d1:b5:27:10:
65:1d:c1:05:b7:2d:de:f1:2e:dd:31:50:4e:52:2c:5c:39:7d:
5c:8b:8a:dc:a6:c2:14:b7:19:93:6c:ba:63:bb:bc:59:cc:5a:
c6:02:b0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:13:23 2026 by rpki-client